Efingerd - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2002-08-12.

Products

• Efingerd - 2 CVEs

Newest CVEs of Efingerd

• CVE-2002-0424 - CVSS 4.6 (medium), 2002-08-12: efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users…
• CVE-2002-0423 - CVSS 10 (critical), 2002-08-12: Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code…